Skip to main content

Module cross_file

Module cross_file 

Source
Expand description

Cross-file sanitizer-aware validation tracking.

Runs after parsing, before detection. When a function is only ever called with sanitized arguments, downgrades its parameters’ ArgumentSource from tainted to Sanitized. This eliminates false positives from internal helper functions that receive already-validated input from their callers.

Structs§

CrossFileResult
Result of cross-file sanitization analysis.

Enums§

SanitizerCategory
Sanitizer category. A sanitizer is only safe for matching sink types.

Functions§

apply_cross_file_sanitization
Perform cross-file sanitizer-aware analysis on parsed files.
is_redaction_sanitizer
is_sanitizer
Check if a function name is a non-redaction input sanitizer. Kept for parser compatibility; redaction helpers are intentionally excluded from this global taint downgrade path.
sanitizer_category
Categorize a sanitizer helper by the sink family it protects.
sanitizer_label